Candidates and release notes are read live from git. The gate is QA sign-off → green-light → release, order-enforced: a step cannot be skipped, and approvals bind to the exact commit they were given for. Releases touching PII or high-risk paths are auto-detected and require a second person to green-light them — the approver must not have written the sensitive changes. Every action is written to an append-only audit trail with the actor, source IP and a correlation id: the POPIA change record.
Reading release candidates from git across the fleet — first load after a restart only.
Checking your session…
Sign in with Google